Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
File: Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer (raw, json)
Hash identifier: ZsLaGy6pmOFiEwSwypympiRXuFfAn50Cr1YoCNGupbs=
Subject key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143A534B41FB3C45F1611420A276E30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.50.112.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a5:34:b4:1f:b3:c4:5f:16:11:42:0a:27:6e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:1a:59:ee:86:42:b5:e9:d2:e5:e1:b7:2e:
a2:0d:06:44:20:8c:a5:42:56:7c:d9:b5:68:a5:6c:
07:44:d9:8a:c5:78:c5:5e:15:99:fb:f2:58:ec:ee:
26:25:1d:d1:e6:6f:13:20:44:cf:1b:5b:53:7c:64:
3a:f8:ff:ea:6b:90:c4:9b:2e:3a:2b:8a:83:45:90:
da:eb:8f:c3:21:cc:51:01:f6:ca:9f:b3:2e:41:b0:
f8:c1:f9:85:7a:dc:83:73:8d:20:f6:0e:53:42:3d:
37:29:6e:6c:f8:b7:62:00:1f:68:2f:f2:fb:70:29:
44:cb:6e:c2:85:ed:a3:e7:39:e7:30:e8:de:18:24:
e5:04:55:51:40:84:76:37:ed:ba:78:c7:48:29:5b:
b7:04:ae:91:da:ed:18:03:68:79:37:52:fa:d7:4a:
cc:de:36:aa:4c:e4:38:d1:8a:8b:0e:93:66:02:cf:
72:70:dd:1b:d1:06:64:b4:71:14:2c:0c:00:da:22:
2f:93:15:8b:14:dd:c7:14:72:15:cb:03:b7:b1:4f:
1e:21:66:ef:6b:1a:47:17:eb:93:d4:2f:b6:e0:e9:
f7:cc:d3:76:e3:1a:9e:45:53:df:ed:11:8f:35:9a:
4c:90:f6:8a:1f:de:99:13:c0:20:63:ac:58:f7:8b:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.112.0/24
Signature Algorithm: sha256WithRSAEncryption
30:dd:da:26:67:90:e7:06:43:5f:3c:ae:cd:c4:6e:cc:41:5a:
18:cc:df:3c:65:11:08:d9:f1:f6:a1:c3:36:6d:cb:d8:0b:91:
c4:5e:89:98:fe:f3:d4:91:3c:d5:2d:b3:24:73:01:f7:9c:ef:
e6:c0:67:ea:6a:bf:92:86:0f:cd:9d:72:68:a8:29:ef:c5:3b:
da:73:e2:56:c6:07:2c:ee:68:78:df:30:ec:ba:1b:79:fd:e6:
f5:8a:87:cc:b5:d3:d2:7a:1b:61:b1:78:99:9d:36:d7:73:fe:
d0:a6:93:6c:d7:f3:87:00:c8:2a:53:51:15:7a:4d:b2:48:f5:
2e:8b:37:f6:d0:4b:16:88:c4:56:93:7c:1f:ff:95:4d:b0:20:
6b:0d:64:ee:cb:33:e6:02:6a:90:56:16:b6:2a:57:68:bd:59:
4b:47:8c:ec:c1:c2:94:54:c8:88:14:bd:95:19:c5:e2:f4:b3:
9a:56:61:af:a6:a1:ff:9b:d4:b5:34:df:3f:79:0d:1f:a4:ba:
a3:74:f8:2a:d4:25:63:c0:68:b0:2e:f3:29:7b:31:44:e5:4c:
58:ca:5e:52:bf:0b:b0:3d:98:20:47:05:9e:f4:b0:9c:83:91:
ec:b0:5e:fe:20:83:46:59:6d:be:02:b8:4a:d9:0b:8c:4e:17:
99:ff:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:56 2025 by rpki-client on console.sobornost.net